NSA Archives

Winsage

December 24, 2025

‘1 engineer, 1 month, 1 million lines of code’: Microsoft wants to replace C and C++ code with Rust by 2030 – but a senior engineer insists the company has no plans on using AI to rewrite Windows source code

Microsoft plans to phase out C and C++ in favor of Rust by 2030, as announced by Galen Hunt, a Distinguished Engineer at the company. AI will assist in large-scale code modifications, and the foundational infrastructure for this transition is already in place. Microsoft has been integrating Rust into its ecosystem, investing a million dollars in 2022 to establish it as a primary language for engineering systems. Rust-based kernel features have been introduced in Windows 11 Insider Preview Build 25905. Hunt clarified that the initiative is a research project aimed at facilitating migration between programming languages, not a complete rewrite of Windows in Rust with AI. Other tech companies, like Google, are also adopting Rust for its productivity and efficiency benefits, driven by security concerns related to C and C++. The US National Security Agency has recommended transitioning to memory-safe programming languages, including Rust.

Winsage

September 16, 2025

Microsoft says Windows September updates break SMBv1 shares

Microsoft has acknowledged that the September 2025 Windows security updates are causing connection difficulties with Server Message Block (SMB) v1 shares across various platforms, including Windows 11 versions 24H2, 23H2, and 22H2, and Windows 10 versions 22H2 and 21H2, as well as Windows Server 2025 and Windows Server 2022. The issue occurs when connecting to SMBv1 shares via the NetBIOS over TCP/IP (NetBT) protocol after installing the September 2025 update or later. Microsoft is working on a resolution and has provided a temporary workaround that involves enabling traffic on TCP port 445. SMBv1 has been largely phased out and officially deprecated since 2014, with Microsoft urging system administrators to eliminate support for it due to security vulnerabilities, especially after the 2017 leak of NSA exploits that targeted SMBv1.

AppWizard

August 26, 2025

Kremlin-Mandated Messaging App Constantly Spies On Users

Russia has mandated that all new smartphones and tablets sold within its borders come pre-installed with a messaging application called Max, developed by VK. Security experts have raised concerns about Max's functionality, describing it as a potential privacy risk due to its "excessive tracking" of user activities. The app lacks cryptography and is considered insecure by design, serving the purpose of surveillance. Max, which launched in March, is available to users with Russian and Belarussian phone numbers and features an AI chatbot, GigaChat 2.0, as well as functionalities for travel bookings and bank transfers. It requests permissions to access standard device features like the camera and microphone and is largely based on the earlier messaging service TamTam. Starting September 1, it will be required that Max is pre-installed on all mobile devices sold in Russia, alongside the domestic app store RuStore on Apple devices. Additionally, the government plans to enforce the installation of Lime HD TV on all smart televisions beginning January 1 of the following year.

AppWizard

August 15, 2025

Ice Cube’s Minecraft Ad Is Much Better Than War Of The Worlds

Ice Cube is participating in a social media campaign as an insurance claims adjuster for Minecraft, launched on August 14. The campaign encourages players to share clips of their in-game mishaps using the hashtag #CubeClaim, where Ice Cube may respond to submissions. This marks the second time he has taken on a role involving a computer setting. The campaign aims to create humorous interactions between Ice Cube and the gaming community, reflecting a shift towards more interactive marketing strategies in the gaming industry.

AppWizard

March 26, 2025

US spies issued warning WEEKS AGO about Signal messaging app security fears and potential leaks

The National Security Agency (NSA) issued a warning on February 25 regarding vulnerabilities in the Signal app that could be exploited by foreign operatives, particularly Russian intelligence. This warning highlighted risks to the confidentiality of conversations and noted that individuals under surveillance should be cautious when using the app. The memo stated that while Department of Defense and NSA employees may use Signal, they are prohibited from discussing sensitive matters on it. Furthermore, the NSA cautioned against sharing compromising information over social media or internet-based applications, urging discretion in online interactions. The warning preceded a scandal involving Trump administration officials who leaked sensitive military information through the app, which included a U.S. journalist in the conversation, leading to potential legal repercussions for violating security guidelines.